中文

// CVE · PUBLISHED 2026-10-07

CVE-2026-96408

Six Apart Ltd. / Movable Type Cloud Edition · Six Apart Ltd. / Movable Type · Six Apart Ltd. / Movable Type Premium Cloud Edition · +1

9.3 · CVSS 4.0Critical

Description

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.